fix launching the wrapper script (it's still insecure though)